Privacy Policy — Click A Diet

Published 20 August 2026

1. Who we are

Click A Diet is the trading name of a sole proprietorship owned by Charu Verma, carrying on business at D-11 Preet Vihar, Delhi 110092, India. The proprietor is the data fiduciary for the personal data described here.

This policy explains what we collect, why, who we share it with, and what rights you have.

2. What we collect

Account information — name, email address, password (stored hashed, never in readable form).

Health and dietary information you submit — age, height, weight, target weight, activity level, dietary preference, allergies and intolerances, religious or cultural food restrictions, medical conditions, medications, doctor-recommended dietary rules, pregnancy or breastfeeding status, eating habits, cooking access, and free-text answers about your goals and challenges. Monthly update forms collect changes to the above.

Consent records — a timestamped, versioned record of which Terms and Privacy Policy you accepted, and when.

Purchase information — what you bought, when, amount paid, coupon used, and payment status. We do not collect or store your card number, UPI ID, or bank details. These go directly to Razorpay.

Technical information — IP address and basic request data, used for security and abuse prevention.

3. Sensitive personal data

Much of what you submit is health information. We treat it as sensitive. It is used to generate your diet plans, to inform later plans in your term, and to improve how our plans are generated (see Section 6). We do not sell it, and we do not use it for advertising.

4. Why we use it

To create and operate your account
To generate your personalized diet plans
To feed your history into subsequent plans in your term
To process payments and verify entitlement
To send your plans and service emails
To improve and evaluate how plans are generated (Section 6)
To meet legal and record-keeping obligations

Our lawful basis is your consent, given at checkout and again before you submit intake information, and the performance of the contract you enter when you purchase.

5. Who we share it with

We use the following processors. Each receives only what it needs.

Supabase — database, authentication, and storage of your account and health data. Servers outside India.
Razorpay — payment processing. Receives your name, email and amount. We never see your card details. India.
Resend — transactional email delivery, including your plans. Servers outside India.
Vercel and other hosting providers we may use — website hosting and request handling. Servers outside India.
Anthropic, Google, OpenAI and other AI providers we may use — AI generation of your diet plan. Servers outside India.

Please read this carefully: to generate your plan, the health and dietary information you submit is sent to one or more third-party AI providers, including Anthropic, Google and OpenAI. We may add or change providers. Your name, email address and payment details are not sent. These providers process that information under their own terms and privacy policies, which apply in addition to this one.

Some of these providers store and process data outside India. By using the service you consent to that transfer.

We may also disclose information where required by law, court order, or lawful government request.

6. Improving our service

We may use your data to train and improve our services. This includes the answers you submit and the plans generated for you, used to train and evaluate the models and patterns behind how plans are produced.

Before your information is used this way, we remove your name, email address and payment information. What remains — age, height, weight, medical conditions and your free-text answers — can still identify you in combination, so we continue to treat it as your personal data and the rights in Section 8 continue to apply to it. We do not attempt to re-identify you, and we do not permit anyone else to.

This use is covered by your acceptance of this Privacy Policy. You may object to it at any time by writing to hello@clickadiet.com, and we will stop using your data for this purpose. Doing so does not affect your plans or your term.

7. How long we keep it

Account and health data — for the duration of your term and for as long as your account remains open, so that past plans stay available to you and can inform future ones.
Consent records and purchase records — retained for six years from the end of the relevant assessment year, as required for tax and financial record-keeping, and longer if any assessment, appeal or other proceeding relating to that period remains open. These are kept even after account deletion.
Generated plans — retained in your account until your account is deleted.

To have your account and health data deleted, write to hello@clickadiet.com from the email address on the account. We will verify the request, delete your account and health data, and retain only what law requires us to keep. We will confirm when this is done.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

Access the personal data we hold about you
Have inaccurate or incomplete data corrected
Have your data erased, subject to our legal retention obligations
Withdraw consent (note that we cannot continue generating plans without it)
Nominate another person to exercise these rights in the event of death or incapacity
Raise a grievance with us, and escalate to the Data Protection Board of India

To exercise any of these, write to hello@clickadiet.com.

9. Security and data breaches

We use row-level access controls so that each account can read only its own records, encrypted connections, and environment-isolated credentials. Passwords are hashed. No system is perfectly secure, and we cannot guarantee absolute security.

If a personal data breach affecting your information occurs, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023, and will tell you what happened, what data was involved, and what you can do about it.

10. Cookies

We use only cookies necessary for login sessions and site function. We do not use advertising or third-party tracking cookies.

11. Children

This service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes

We may update this policy. Published versions are dated and retained. Material changes will be notified by email.

13. Grievance Officer

Charu Verma
Grievance Officer, Click A Diet
D-11 Preet Vihar, Delhi 110092
hello@clickadiet.com
+91 9560315917

Version 2026-08-20. This is the version currently in force.